Local Privilege Escalation in Device Policy Management by Android

CVE-2025-22442

What is CVE-2025-22442?

A vulnerability exists in the DevicePolicyManagerService of Android, which allows the installation of unauthorized applications into a work profile due to a race condition. This flaw enables local privilege escalation without requiring additional execution privileges or user interaction. As a result, malicious actors could exploit this vulnerability to gain unauthorized access and control, raising significant security concerns for users and devices.

References